False positive with executable opti.exe ?

Viruses and worms
1

I am new here, so “Hello” to all.

I have just downloaded a program (opti.exe) from the following site :
http://energie.wallonie.be/fr/opti-maisons-version-4.html?IDC=8957&IDD=62441
The download link is at the bottom of the page (OPTI-maisons Version 4).

Avast reports a threat, that is also confirmed by the online scanner Virustotal (https://www.virustotal.com/).
The VirusTotal analysis reports that only 8 out of 56 virus scanners detect a threat.

So, is it a false positive from Avast ?

Thank you for your help.

Alain

2

Pls put the VT Link here :slight_smile:

3

Thanks for your attention.
Here is the link :
https://www.virustotal.com/fr/file/315fc211a43cca24991981369d83cd8844d0b6b6fdb3b85b704f4b105c4bf5fb/analysis/

Alain

4

It is look like a genuine threat :slight_smile:

5

Please find attached the Avast report. But nothing more than what VirusTotal report says…

Alain

6

Hey r you running a old version of avast?Pls update it to new one from here:https://forum.avast.com/index.php?topic=176600.0 to get support and more protection :)old version of avast support is ended.Post required logs here:https://forum.avast.com/index.php?topic=53253.0

7

I have on old version of Avast but still get the latest engine and virus definition files.
Moreover, VirusTotal certainly uses the latest version of Avast to generate its report.
So I am afraid updating Avast on my side will not help in any way about this false positive…

Alain

8

file is new at VT First submission 2015-10-14 07:50:46 UTC ( 5 days, 7 hours ago )
and detected by avast with a generic signature, so yes probably a FP

9

I see nothing on the link scan you forwarded: http://urlquery.net/report.php?id=1445267969264
but I hope you have a good ad-script blocker to block links like

polonus (volunteer website security analyst and website error-hunter)